Copying stable and maintainers. Chris Spiegel <[email protected]> writes:
> If an error occurs in bdrv_snapshot_delete_by_id_or_name(), "err" is > freed. If "err" is not set to NULL before calling > bdrv_snapshot_delete_by_id_or_name() again, it will not be updated on > error, and will be freed again. > > This can be triggered by starting a VM with at least two drives and then > attempting to delete a non-existent snapshot. > > Signed-off-by: Chris Spiegel <[email protected]> Broken in commit a89d89d. With the above sentence added to the commit message: Reviewed-by: Markus Armbruster <[email protected]> I checked the commit and the file for similar bugs, didn't find any.
